Overview

overview

10

Static

static

10

NEAS.18ff5...JC.exe

windows7-x64

10

NEAS.18ff5...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.18ff585088481746348ac182582e0da0_JC.exe

  • Size

    345KB

  • Sample

    231104-ymqpssgb28

  • MD5

    18ff585088481746348ac182582e0da0

  • SHA1

    a927005e7807604fb8aa3025157f903fe25281ca

  • SHA256

    d185ada35b4b7f651e4d59b31a6e1f8b2a94077b627ac77000b9a65a58ea6410

  • SHA512

    a95485bf89d69c3fa7d86312a48af0e0bd736255e5ef684aa464b05a6e42aab3e471e8725e43b3d559eb3a423a21b45f06b6368a8e7230fb518cc5d55601b27e

  • SSDEEP

    6144:UVAAMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeK9kc:kn1uznghoaHACwBkka8eGp7dPRr6aeKr

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.18ff585088481746348ac182582e0da0_JC.exe

    • Size

      345KB

    • MD5

      18ff585088481746348ac182582e0da0

    • SHA1

      a927005e7807604fb8aa3025157f903fe25281ca

    • SHA256

      d185ada35b4b7f651e4d59b31a6e1f8b2a94077b627ac77000b9a65a58ea6410

    • SHA512

      a95485bf89d69c3fa7d86312a48af0e0bd736255e5ef684aa464b05a6e42aab3e471e8725e43b3d559eb3a423a21b45f06b6368a8e7230fb518cc5d55601b27e

    • SSDEEP

      6144:UVAAMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeK9kc:kn1uznghoaHACwBkka8eGp7dPRr6aeKr

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks